Follow Discord
Sweep 10 Nov 2026 · 02:18Z Build v2.1.322 539 read Stable v2.1.311 Latest v2.1.322 Next v2.1.322 Feeds RSS JSON llms.txt llms-full.txt Unofficial
HomeReleasesv2.1.260entry #22

Claude Code v2.1.260 ·

Argument-scoped permission rules for built-in tool controls

Permission rules can now target specific arguments like Bash(curl *) instead of whole tools.

Use it now Notable Improvements
JSON All of v2.1.260
Use it nowTier: how much it should matter to you
4Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
PermissionsArea: what it touches
ImprovementsKind: in v2.1.260,
What probably matters to youSection of the release

builtinToolPolicy and disabledBuiltinTools now accept argument-scoped rules like Bash(curl *) or Read(**/secrets/**), not just bare tool names. New parsing and validation logic, parseBuiltinRule and canonicalBuiltinRule, backs this and warns on malformed entries.

Read from
Names in the bundlebuiltinToolPolicydisabledBuiltinTools
What the documentation says
Documented inclaude-code/claude-apps-gateway-config
Since it was published

The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.

Confirmed since Anthropic's documentation has since written up builtinToolPolicy, on Configuration reference. | <span id="builtintoolpolicy" />Built-in tool policy<br />`builtinToolPolicy` | `object` | MDM + Bootstrap<br />Added in 1.8089.0 | — | Approval policy per built-in tool or argument-scoped rule such as Bash(curl \*). “ask” requires user a… third-party/claude-desktop/configuration see the edit
Confirmed since Anthropic's documentation has since written up disabledBuiltinTools, on Configuration reference. | <span id="disabledbuiltintools" />Disabled built-in tools<br />`disabledBuiltinTools` | `string[]` | MDM + Bootstrap<br />Added in 1.2581.0 | — | Built-in tools, or argument-scoped permission rules such as Read(\*\*/.env), denied in Cowo… third-party/claude-desktop/configuration see the edit
Added since A small documentation edit on Telemetry and egress touched a line naming disabledBuiltinTools after this was published. With `disableEssentialTelemetry`, `disableNonessentialTelemetry`, `disableNonessentialServices`, and `disableAutoUpdates` all set to `true`, the desktop application makes **no outbound connections to Anthropic-operated hosts at runtime**. … third-party/claude-desktop/telemetry see the edit
How sure we are
Two sources agreeTwo things we can check say the same as this entry.
Anthropic's documentation agreesA small documentation edit on Telemetry and egress touched a line naming disabledBuiltinTools after this was published.
Anthropic's release notes agreeFixed Edit/Write/Read permission rules whose path contains parentheses being dropped as invalid or ignored by the Bash sandbox, which left…

See this entry in the whole of v2.1.260 →

Feedback